I'm losing my mind with people who keep replying with "That's open source baby! Don't make it open source if you don't like!" The problem with this behavior is as follows: - The MIT license requires attribution of the original work. The author contacted the person who forked this privately [1]. It wasn't done until the Twitter thread. - Questionably the fork was renamed and didn't include git history to make the firs…
I was on the forker’s side of things until those last two points: I don’t think anybody should have to justify creating a fork, but the (seemingly intentional) stripping of the revision history and absence of attribution indicates a bad actor to me.
A notable JavaScript developer shamelessly copied one of my most downloaded nod
251–260 of 309 posts
Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod
#252Earlier quoted context omitted.
I added Colorette mention before the Twitter thread. Just after Colorette’s author asked me. We even agreed on text form of this mention. He started Twitter thread because of my PRs to Babel. After Twitter thread I just copied git commits (only because another person helped my with doing it right) and created COPYRIGHT file (but Colorette author was mentioned in LICENSE before the threat anyway).
Please tell me why didn’t you just click the fork button or mentioned Colorette from the very beginning but instead started out maliciously and tried to use your influence to your advantage? To me there’s no other explanation than you tried to sweep it under the rug but it didn’t work out so you’re playing the victim card.
https://twitter.com/sitnikcode/status/1441827379454746637?s=...
Fork button will not work for this case.
Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod
#253Earlier quoted context omitted.
Please tell me why didn’t you just click the fork button or mentioned Colorette from the very beginning but instead started out maliciously and tried to use your influence to your advantage? To me there’s no other explanation than you tried to sweep it under the rug but it didn’t work out so you’re playing the victim card.
As I mention here, because Nano Colors it's not just fork of Colorette. It was created as a mix of Colorette and kleur. https://twitter.com/sitnikcode/status/1441827379454746637?s=... Fork button will not work for this case.
Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod
#254Earlier quoted context omitted.
> albeit after being called out Nano Colors mentioned Colorette in docs and Colorette author in LICENSE before Twitter thread. Colorette’s author asked m and I add the mention and agreed on the text.
Thank you for clarification. Would you mind providing proof of this? It seems many other comments claiming that attribution is only provided after being called out.
Seems like people are confused by git rebase which change commit time in GitHub.
Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod
#255Earlier quoted context omitted.
His explanation on Reddit: "The way I learned how to program was by publishing one project a day that used a specific language feature I was trying to learn. No one even looked at my projects or used them until I had quite a few published. I didn't even want people to use them at that point, since I had no idea what I was doing. Then one day I realized that people were actually using some of the things I published as…
Maybe public common repository shouldn't be used as a dumping ground for every random guy learning how to make their first script. It's a bit like learning to drive by going to a public highway and just starting driving at random directions and then saying "why are you folks screaming? I'm just learning, it's depressing you always assume the worst!"
What's actually harmful is the blind trust most developers have on adding dependencies without proper vetting. But if someone publishes a package they are not responsible for vetting it for inclusion in your project. So shifting blame to the library author gets responsibilities backwards.
Perhaps you would prefer a curated package registry, but in this case you would need actual curators. Something like Debian has maintainers, but doesn't have every library in existence (and what it has is often outdated anyway). Npm and other language registries aren't curated, by design. You could create a curated registry on top of npm but, again, you need curators.
Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod
#256Earlier quoted context omitted.
Cascade of attention deficit[0]? JS is a vast ecosystem with little barriers to entry, and > Fixing bugs isn't fun; going through the bug list isn't fun; but rewriting everything from scratch is fun (because "this time it will be done right", ha ha) and so that's what happens, over and over again. I don't think there's anything malicious going on, except a lot of people doing JS. [0] https://www.jwz.org/doc/cadt.html
> I don't think there's anything malicious going on The dev who copied the code forked someone’s repo, went out of his way to remove attribution and git history, sent PRs to replace the original package in other libraries with his own version, and when called out on it got defensive instead of apologizing. I think malicious is a fair way to describe his behavior.
Would you mind sharing a link to such PR?
Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod
#257Earlier quoted context omitted.
Cascade of attention deficit[0]? JS is a vast ecosystem with little barriers to entry, and > Fixing bugs isn't fun; going through the bug list isn't fun; but rewriting everything from scratch is fun (because "this time it will be done right", ha ha) and so that's what happens, over and over again. I don't think there's anything malicious going on, except a lot of people doing JS. [0] https://www.jwz.org/doc/cadt.html
> I don't think there's anything malicious going on The dev who copied the code forked someone’s repo, went out of his way to remove attribution and git history, sent PRs to replace the original package in other libraries with his own version, and when called out on it got defensive instead of apologizing. I think malicious is a fair way to describe his behavior.
Even before this Twitter thread we had talk with Colorette author and I added mention to the docs, his name to LICENSE and promised him to not replace Colorette by Nano Colors.
The Colorette mention was there 5 days ago.
Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod
#258What is even going on here? https://github.com/jorgebucaran/colorette/issues/78 . They're arguing about who should have attribution for adding a single "!s &&" to improve performance? What happened with the world where open-source was about creating cool projects together , not about who has the most stars on GitHub? To be honest, this is the general feeling I get from the JavaScript community: Instead of working tog…
What's the term for when people with little to lose in low-stakes conflicts just have at it?
Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod
#259Earlier quoted context omitted.
For what it's worth, this is also all the work of one person who spammed NPM with micropackages to boost his download counts. This meme attacking `npm` for nonsense like `is-odd` is quite literally the result of one person resume boosting. For every one thing, he broke it down into as many possible packages as possible, and all of his packages depend on 20 more of his packages. It's like a fractal of resume boosting.…
His explanation on Reddit: "The way I learned how to program was by publishing one project a day that used a specific language feature I was trying to learn. No one even looked at my projects or used them until I had quite a few published. I didn't even want people to use them at that point, since I had no idea what I was doing. Then one day I realized that people were actually using some of the things I published as…
Re: A notable JavaScript developer shamelessly copied one of my most downloaded nod
#260Earlier quoted context omitted.
You should mention your conflict of interest as the nanocolors “developer”.
I am mentioning it in Babel PRs: > It will have a good support. My other projects from nano-series like very popular Nano ID shows a minimal number of bugs and excellent response time.
Should we copy your code, attribute it to you in a readme, and slightly optimize some of your code to replace your efforts everywhere?